The vulnerability in the app/plug/controller/giftcontroller.php script of the Zhicms CMS system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the app/plug/controller/giftcontroller.php script of the Zhicms CMS system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

CVE-2024-0603

A vulnerability classified as critical has been found in ZhiCms up to 4.0. This affects an unknown part of the file app/plug/controller/giftcontroller.php. The manipulation of the argument mylike leads to deserialization. It is possible to initiate the attack remotely. The exploit has been...

PT-2024-1613 · Zhicms · Zhicms

Name of the Vulnerable Software and Affected Versions: ZhiCms versions up to 4.0 Description: A critical vulnerability has been found in ZhiCms, affecting an unknown part of the file app/plug/controller/giftcontroller.php. The manipulation of the mylike argument leads to deserialization. It is...